2eb72910ecc7e3241eb5886658676d42ca11dd4d0f3c45abcaf9a0bebcb6

2eb72910ecc7e3241eb5886658676d42ca11dd4d0f3c45abcaf9a0bebcb6ee6d
source: hxxps://antiteza.org/99200277_0.php

https://www.virustotal.com/gui/file/2eb72910ecc7e3241eb5886658676d42ca11dd4d0f3c45abcaf9a0bebcb6ee6d/detection
https://app.any.run/tasks/d74e3b10-6b42-42dc-9149-9bced8b07018

...
>> 92890
>> 92895
>> 92900
>> 92905
>> 92910
Candidate XOR key: 23384b0558142723206627f2ee6554e7
Raw config: <mcconf><ver>1000402</ver><gtag>ono1</gtag><servs><srv>164.132.138.130:443</srv><srv>185.251.38.72:443</srv><srv>31.184.252.86:443</srv><srv>185.151.245.43:443</srv><srv>77.244.215.137:443</srv><srv>85.143.216.5:443</srv><srv>89.223.93.110:443</srv><srv>200.122.209.78:449</srv><srv>190.109.178.222:449</srv><srv>181.143.17.66:449</srv><srv>177.105.235.17:449</srv><srv>97.87.160.98:449</srv><srv>190.0.20.114:449</srv><srv>201.219.143.18:449</srv><srv>201.184.69.50:449</srv><srv>190.109.165.197:449</srv><srv>125.209.82.158:449</srv><srv>80.173.224.81:449</srv><srv>76.107.90.235:449</srv><srv>103.122.33.58:449</srv><srv>191.103.219.138:449</srv><srv>202.63.242.48:449</srv><srv>181.176.191.5:449</srv><srv>190.117.66.194:449</srv><srv>186.226.188.105:449</srv><srv>201.236.142.108:449</srv><srv>200.105.147.34:449</srv><srv>209.45.30.2:449</srv><srv>181.115.236.26:449</srv><srv>190.196.32.42:449</srv><srv>97.87.160.98:449</srv><srv>177.105.237.93:449</srv><srv>103.87.24.221:449</srv><srv>181.209.88.26:449</srv><srv>201.236.142.108:449</srv><srv>136.25.2.43:449</srv></servs><autorun><module name="systeminfo" ctl="GetSystemInfo"/><module name="injectDll"/><module name="pwgrab"/></autorun></mcconf>